dpkg-cert already does something like this. Klee is going to fold the
capabilities of dpkg-cert into dpkg, so I think a solution is on
the horizon. :-)
We just have to wait patiently for Klee and his upcoming proposal to overhaul
dpkg.
Cheers,
- Jim